1. Home
  2. CVE Database
  3. CVE-2020-10276
CRITICAL · 9.8

CVE-2020-10276

The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in...

Vulnerability Description

The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the laser scanner are not affected (thus it is hard to detect before something happens) though the laser scanner configuration can also be affected altering further the safety of the device.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Mobile-Industrial-RobotsMir100 Firmware<= 2.8.1.1
Mobile-Industrial-RobotsMir100-
Mobile-Industrial-RobotsMir200 Firmware-
Mobile-Industrial-RobotsMir200-
Mobile-Industrial-RobotsMir250 Firmware-
Mobile-Industrial-RobotsMir250-
Mobile-Industrial-RobotsMir500 Firmware-
Mobile-Industrial-RobotsMir500-
Mobile-Industrial-RobotsMir1000 Firmware-
Mobile-Industrial-RobotsMir1000-
EasyroboticsEr200 Firmware-
EasyroboticsEr200-
EasyroboticsEr-Lite Firmware-
EasyroboticsEr-Lite-
EasyroboticsEr-Flex Firmware-
EasyroboticsEr-Flex-
EasyroboticsEr-One Firmware-
EasyroboticsEr-One-
Uvd-RobotsUvd Firmware-
Uvd-RobotsUvd-

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2020-10276?

CVE-2020-10276 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The password for the safety PLC is the default and thus easy to find (in manuals, etc.). This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in...

How severe is CVE-2020-10276?

CVE-2020-10276 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-10276?

Check the references section above for vendor advisories and patch information. Affected products include: Mobile-Industrial-Robots Mir100 Firmware, Mobile-Industrial-Robots Mir100, Mobile-Industrial-Robots Mir200 Firmware, Mobile-Industrial-Robots Mir200, Mobile-Industrial-Robots Mir250 Firmware.